Skip to content

test(mcp): cover secrets in named fragments - #812

Merged
sechmann merged 1 commit into
fix/mcp-graphql-validationfrom
fix/mcp-fragment-secrets
Oct 23, 2026
Merged

sechmann merged 1 commit into
fix/mcp-graphql-validationfrom
fix/mcp-fragment-secrets

Conversation

@sechmann

Copy link
Copy Markdown
Contributor

Closes #803.

The fix (resolving named fragments in checkForSecrets) is in the base PR for #809. This adds a regression test for the exact case from the issue: fragment TeamFields on Team { deploymentKey { key } }.

@sechmann
sechmann added this pull request to stack #813 October 23, 2026 10:35
@github-actions

Copy link
Copy Markdown
Contributor

📝 Changelog preview

Below is a preview of the Changelog that will be added to the next release. Only commit messages that follow the Conventional Commits specification will be included in the Changelog.

v7.0.2 - 2026-10-23

Full Changelog: v7.0.1...v7.0.2

🐛 Bug Fixes

  • (mcp) Refuse multi-operation documents and resolve fragments in checks (5a32fbc)

⚙️ Miscellaneous Changes

  • (device) Use short socket path on macOS (4bfadcf)
  • (mcp) Cover secrets in named fragments (ec3c9c4)

@sechmann
sechmann merged commit ae3e3d3 into main Oct 23, 2026
22 checks passed
@sechmann
sechmann deleted the fix/mcp-fragment-secrets branch October 23, 2026 10:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

mcp: traverse named GraphQL fragments in checkForSecrets

1 participant